[ovs-dev] [IPv6 Redux 3/6] nicira-ext: Support matching ARP source and target hardware addresses.

Ben Pfaff blp at nicira.com
Sat Jan 22 16:13:22 UTC 2011


On Sat, Jan 22, 2011 at 3:11 AM, Justin Pettit <jpettit at nicira.com> wrote:
> OpenFlow 1.0 doesn't allow matching on the ARP source and target
> hardware address.  This has caused us to introduce hacks such as the
> Drop Spoofed ARP action.  Now that we have extensible match, we can
> match on more fields within ARP:
>
>    - Source Hardware Address (arp_sha)
>    - Target Hardware Address (arp_tha)
>
> Signed-off-by: Justin Pettit <jpettit at nicira.com>

One thing that this commit does not do, that it could do, is to remove
the ODPAT_DROP_SPOOFED_ARP action.  It can now be implemented in userspace
without kernel assistance.  (This could also be an additional commit, so
it's not a big deal.)




More information about the dev mailing list